This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to capture Wi-Fi traffic from another machine

0

My network topology is as below:

Internet ------ Wireless Router --(Via WIRED LAN)-- PC (with Wireshark)
                          |
                          |--(Via Wifi WPA2-PSK)-- Android Phone

I can capture http traffic on my PC (wired directly with Wireless router), but not for my Android Phone. By filtering with the MAC address of my Android as source, only DHCP,ICMPv6,ARP are captured. How can I setup Wireshark to capture http traffic on my Android? Thanks in advance.

asked 25 Nov '12, 05:10

blue's gravatar image

blue
6113
accept rate: 0%

edited 25 Nov '12, 11:28

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


2 Answers:

1

How can I setup Wireshark to capture http traffic on my Andriod? Thanks in advance.

You can't, as your router will not send the traffic from your android phone to your PC. What you have seen (ARP, DHCP, etc.) is just broadcast traffic, which will be broadcasted to the network.

UPDATE:

If you want to capture the traffic of your android phone you have these options:

  • capture the wifi/wlan traffic on your PC. However, that requires a WLAN NIC in your PC and most certainly you must run the PC with linux to be able to operate the WLAN NIC in monitor mode. Monitor mode on Windows depends on the NIC driver and is only supported with a few WLAN NICs on Windows 7 (NDIS6 compatible driver).

    http://wiki.wireshark.org/CaptureSetup/WLAN

  • Figure out if your router is able to mirror traffic from the WLAN interface to the LAN interface. Search the docs for something like "port mirror" or "port mirroring". If that option is available, mirror the whole WLAN traffic to the LAN interface, where your PC is connected to. Then run Wireshark on the PC.
  • Place a switch with port mirroring capabilities between your router and the "Internet" (presumably between the DSL modem and the router). Then mirror the whole traffic from the router interface to another port on that switch and connect your PC to that port. See the following wiki entry.

http://wiki.wireshark.org/CaptureSetup/Ethernet

  • Add a second ethernet NIC to your PC and configure a bridge. Then place your PC between the router and the DSL modem (or DSL router). Capture the traffic on your PC on any of the two bridged interfaces.

http://windows.microsoft.com/en-US/windows-vista/Create-a-network-bridge

Regards
Kurt

answered 25 Nov '12, 09:13

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 25 Nov '12, 12:51

Thanks a lot! Very useful suggestions!

(28 Nov '12, 22:23) blue

0

Place an old HUB between WLAN Access point and Network. Then connect temporarily your PC to the HUB. If the WLAN access point is a router and the gateway into the internet you probably need another WLAN access point and connect your Android phone to this new access point.

WLAN AP (new) -> HUB -> WLAN AP and Router -> Internet

                  |
                  +--> Monitoring PC

answered 29 Jan '14, 09:19

hardbreaker's gravatar image

hardbreaker
112
accept rate: 0%

edited 29 Jan '14, 09:25